CVE-2023-36521highCWE-770

CVE-2023-36521: falha de alta gravidade em Siemens SIMATIC MV540 H

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SIMATIC MV540 H+ Monitorar SIMATIC MV540 S

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.6epss 0.6%
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). The result synchronization server of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of all socket-based communication of the affected products if the result server is enabled.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
Produtos afetados
Siemens · SIMATIC MV540 HSiemens · SIMATIC MV540 SSiemens · SIMATIC MV550 HSiemens · SIMATIC MV550 SSiemens · SIMATIC MV560 USiemens · SIMATIC MV560 X
CVEs relacionadas — Siemens SIMATIC MV540 H

No mesmo produto, das mais perigosas para as menos.

CVE-2020-28400HIGHCVE-2020-28400EPSS 1.9%CVE-2022-33138—CVE-2022-33138EPSS 1.3%CVE-2023-35921HIGHCVE-2023-35921EPSS 0.9%CVE-2023-35920HIGHCVE-2023-35920EPSS 0.9%CVE-2022-33137—CVE-2022-33137EPSS 0.9%